Return-Path: Received: (majordomo@vger.kernel.org) by vger.kernel.org via listexpand id S1754185AbbETPSx (ORCPT ); Wed, 20 May 2015 11:18:53 -0400 Received: from bombadil.infradead.org ([198.137.202.9]:53408 "EHLO bombadil.infradead.org" rhost-flags-OK-OK-OK-OK) by vger.kernel.org with ESMTP id S1753525AbbETPSt (ORCPT ); Wed, 20 May 2015 11:18:49 -0400 Message-ID: <1432135104.3277.142.camel@infradead.org> Subject: Re: [PATCH] modsign: Use single PEM file for autogenerated key From: David Woodhouse To: David Howells Cc: Abelardo Ricart III , Michal Marek , torvalds@linux-foundation.org, linux-kernel@vger.kernel.org, sedat.dilek@gmail.com, keyrings@linux-nfs.org, rusty@rustcorp.com.au, linux-security-module@vger.kernel.org, james.l.morris@oracle.com, gregkh@linuxfoundation.org Date: Wed, 20 May 2015 16:18:24 +0100 In-Reply-To: <6358.1432133783@warthog.procyon.org.uk> References: <1432121201.3277.135.camel@infradead.org> <1430516505-4812-1-git-send-email-aricart@memnix.com> <1432117021.22716.21.camel@infradead.org> <6358.1432133783@warthog.procyon.org.uk> Content-Type: text/plain; charset="UTF-8" X-Mailer: Evolution 3.12.11 (3.12.11-1.fc21) Mime-Version: 1.0 Content-Transfer-Encoding: 7bit X-SRS-Rewrite: SMTP reverse-path rewritten from by bombadil.infradead.org See http://www.infradead.org/rpr.html Sender: linux-kernel-owner@vger.kernel.org List-ID: X-Mailing-List: linux-kernel@vger.kernel.org Content-Length: 1453 Lines: 32 On Wed, 2015-05-20 at 15:56 +0100, David Howells wrote: > David Woodhouse wrote: > > > I am disinclined to put in place any kind of backward-compatibility to > > find and use the old filenames. And I don't much care about changing the > > build system 'interface' for the user. I'm *very* keen to break that > > $(wildcard *.x509) crap anyway, so we might as well do this at the same > > time. > > Should some sort of warning then be emitted if $(wildcard *.x509) *does* turn > up anything? Just so that people don't get unexpectedly surprised when their > auxiliary keys are suddenly ignored. Would people even notice such a warning? People who are using long-term keys and inserting them into the kernel build probably ought to be paying attention and know what they're doing. There are relatively few of them, and I think that as long as the change is clearly documented, we should probably be fine. Besides, *anyone* relying on that horrid wildcard crap should have *expected* it to go away because it was an abomination :) -- David Woodhouse Open Source Technology Centre David.Woodhouse@intel.com Intel Corporation -- To unsubscribe from this list: send the line "unsubscribe linux-kernel" in the body of a message to majordomo@vger.kernel.org More majordomo info at http://vger.kernel.org/majordomo-info.html Please read the FAQ at http://www.tux.org/lkml/